[SSSD] sssd caching hosts ?

Dmitri Pal dpal at redhat.com
Wed Mar 18 23:54:04 UTC 2015


On 03/18/2015 07:33 PM, Olivier wrote:
> Thanks for your replies,
>
> I found the ticket, that's why I asked : sounds to me a hard job to 
> plan, especially now with DNSEC validation (and not sure that it would 
> have a real added value)... A "natural" way for sssd if really a plan 
> might be to catch zones from one of the ldap bakend available for bind ?
>
> Anyway, the real reason I'm investigating : I'm distributing sudo 
> rules with ldap and I want to use hostname to tell which host the 
> rules appliy on. I have told in nsswitch.conf to query the DNS to find 
> out the hostname but I'm not sure about how is collected the hostname 
> from the dns in the checking process (especially if the machine has 
> more than one interface) ? Is the label considered as being the 
> hostname the reverse of the IP adress for the default interface ?
>
You know that you can use SSSD with sudo integration, right? SSSD will 
take care of this for you automatically.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf


> Thanks for any guidance,
>
> --
> Olivier
>
>
>
> 2015-03-17 21:27 GMT+01:00 Jakub Hrozek <jhrozek at redhat.com 
> <mailto:jhrozek at redhat.com>>:
>
>     On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri Pal wrote:
>     > On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:
>     > >On (17/03/15 17:26), Olivier wrote:
>     > >>Hi everyone,
>     > >>
>     > >>I was wondering if host requests caching is still part of sssd
>     plans :
>     > >>https://fedorahosted.org/sssd/ticket/359
>     > >>
>     > >This ticket is in deferred section
>     > >which means that we do not plan to implement it in near future.
>     > >
>     > >But contribution is welcomed everytime and we can provide
>     assistance.
>     > >
>     > >LS
>     > >_______________________________________________
>     > >sssd-devel mailing list
>     > >sssd-devel at lists.fedorahosted.org
>     <mailto:sssd-devel at lists.fedorahosted.org>
>     > >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>     > Why do you need it? It is really bad idea to have hosts map.
>     > DNS is the way to do.
>
>     Right, this is the direction Fedora has been pushing.
>
>     In the meantime, you can still use nscd for the hosts map only.
>     _______________________________________________
>     sssd-devel mailing list
>     sssd-devel at lists.fedorahosted.org
>     <mailto:sssd-devel at lists.fedorahosted.org>
>     https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
>
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150318/ee52d894/attachment.html>


More information about the sssd-devel mailing list